# Google Android. Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-22433.md) `CVE-2025-22433` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-22431.md) `CVE-2025-22431` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-693 - [Information disclosure in Google Android](https://agentprime.io/advisories/CVE-2025-22430.md) `CVE-2025-22430` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 2 Sept 2025 · Tags: Information disclosure - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-22429.md) `CVE-2025-22429` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-693 - [Incorrect authorization in Google Android](https://agentprime.io/advisories/CVE-2025-22428.md) `CVE-2025-22428` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: Broken access control - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-22427.md) `CVE-2025-22427` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-693 - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2025-22423.md) `CVE-2025-22423` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 2 Sept 2025 · Tags: Memory corruption - [Insecure direct object reference in Google Android](https://agentprime.io/advisories/CVE-2025-22422.md) `CVE-2025-22422` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: Broken access control - [Sensitive information in error messages in Google Android](https://agentprime.io/advisories/CVE-2025-22421.md) `CVE-2025-22421` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 2 Sept 2025 · Tags: Information disclosure - [Clickjacking in Google Android](https://agentprime.io/advisories/CVE-2025-22419.md) `CVE-2025-22419` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-1021 - [In multiple locations, there is a possible confused deputy due to Intent Redirect.](https://agentprime.io/advisories/CVE-2025-22418.md) `CVE-2025-22418` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-441 - [Clickjacking in Google Android](https://agentprime.io/advisories/CVE-2025-22417.md) `CVE-2025-22417` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-1021 - [In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-22416.md) `CVE-2025-22416` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-441 - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2024-49730.md) `CVE-2024-49730` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: Memory corruption - [In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy.](https://agentprime.io/advisories/CVE-2024-49728.md) `CVE-2024-49728` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-610 - [In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy.](https://agentprime.io/advisories/CVE-2024-49722.md) `CVE-2024-49722` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-610 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2024-49720.md) `CVE-2024-49720` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-693 - [Improper authentication in Google Android](https://agentprime.io/advisories/CVE-2024-40653.md) `CVE-2024-40653` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 2 Sept 2025 · Tags: Authentication bypass - [In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-26417.md) `CVE-2025-26417` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: CWE-610 - [In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code.](https://agentprime.io/advisories/CVE-2025-22413.md) `CVE-2025-22413` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: CWE-703 - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-22412.md) `CVE-2025-22412` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-22411.md) `CVE-2025-22411` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-22410.md) `CVE-2025-22410` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-22409.md) `CVE-2025-22409` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-22408.md) `CVE-2025-22408` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-22407.md) `CVE-2025-22407` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-22406.md) `CVE-2025-22406` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-22405.md) `CVE-2025-22405` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-22404.md) `CVE-2025-22404` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-22403.md) `CVE-2025-22403` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Incorrect permission assignment in Google Android](https://agentprime.io/advisories/CVE-2025-0093.md) `CVE-2025-0093` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 26 Aug 2025 · Tags: Broken access control - [Insufficient verification of data authenticity in Google Android](https://agentprime.io/advisories/CVE-2025-0092.md) `CVE-2025-0092` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: CWE-345, CWE-356 - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2025-0086.md) `CVE-2025-0086` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: Broken access control - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-0084.md) `CVE-2025-0084` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Improper output encoding in Google Android](https://agentprime.io/advisories/CVE-2025-0083.md) `CVE-2025-0083` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: CWE-116 - [In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-0082.md) `CVE-2025-0082` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: CWE-610 - [Use of uninitialized variable in Google Android](https://agentprime.io/advisories/CVE-2025-0081.md) `CVE-2025-0081` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Execution with unnecessary privileges in Google Android](https://agentprime.io/advisories/CVE-2025-0080.md) `CVE-2025-0080` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 26 Aug 2025 · Tags: Privilege escalation - [Execution with unnecessary privileges in Google Android](https://agentprime.io/advisories/CVE-2025-0079.md) `CVE-2025-0079` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 26 Aug 2025 · Tags: Privilege escalation - [Execution with unnecessary privileges in Google Android](https://agentprime.io/advisories/CVE-2025-0078.md) `CVE-2025-0078` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 26 Aug 2025 · Tags: Privilege escalation - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-0075.md) `CVE-2025-0075` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2025-0074.md) `CVE-2025-0074` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2024-49740.md) `CVE-2024-49740` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: Denial of service - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2023-21125.md) `CVE-2023-21125` · CVE record: Google Android · CVSS 8.0 High · Not analysed yet · Published 26 Aug 2025 · Tags: Memory corruption - [NULL pointer dereference in Google Android](https://agentprime.io/advisories/CVE-2025-27701.md) `CVE-2025-27701` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-27700.md) `CVE-2025-27700` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 27 May 2025 · Tags: CWE-693 - [Information disclosure in Google Android](https://agentprime.io/advisories/CVE-2024-56193.md) `CVE-2024-56193` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 27 May 2025 · Tags: Information disclosure - [In wl_notify_gscan_event of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2024-56192.md) `CVE-2024-56192` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2025 · Tags: CWE-281 - [In dhd_process_full_gscan_result of dhd_pno.c, there is a possible EoP due to an integer overflow.](https://agentprime.io/advisories/CVE-2024-56191.md) `CVE-2024-56191` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 10 Mar 2025 · Tags: CWE-281 - [NULL pointer dereference in Google Android](https://agentprime.io/advisories/CVE-2024-56188.md) `CVE-2024-56188` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 10 Mar 2025 · Tags: Memory corruption - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-56187.md) `CVE-2024-56187` · CVE record: Google Android · CVSS 6.6 Medium · Not analysed yet · Published 10 Mar 2025 · Tags: Memory corruption - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-56186.md) `CVE-2024-56186` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 10 Mar 2025 · Tags: Memory corruption - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-56185.md) `CVE-2024-56185` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 10 Mar 2025 · Tags: Memory corruption - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2024-56184.md) `CVE-2024-56184` · CVE record: Google Android · CVSS 5.1 Medium · Not analysed yet · Published 10 Mar 2025 · Tags: Memory corruption - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2024-40677.md) `CVE-2024-40677` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 28 Jan 2025 · Tags: Broken access control - [Type confusion in Google Android](https://agentprime.io/advisories/CVE-2024-40676.md) `CVE-2024-40676` · CVE record: Google Android · CVSS 7.7 High · Not analysed yet · Published 28 Jan 2025 · Tags: Memory corruption - [Infinite loop in Google Android](https://agentprime.io/advisories/CVE-2024-40675.md) `CVE-2024-40675` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 28 Jan 2025 · Tags: Denial of service - [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2024-40674.md) `CVE-2024-40674` · CVE record: Google Android · CVSS 5.3 Medium · Not analysed yet · Published 28 Jan 2025 · Tags: Memory corruption - [Code injection in Google Android](https://agentprime.io/advisories/CVE-2024-40673.md) `CVE-2024-40673` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 28 Jan 2025 · Tags: Code injection - [In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check.](https://agentprime.io/advisories/CVE-2024-40672.md) `CVE-2024-40672` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 28 Jan 2025 · Tags: CWE-281 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .